access control

restrict who can view your tinydot site using Google sign-in.

how it works

by default, sites are public. when you enable access control, visitors must sign in with their Google account. only emails or domains you approve get access.

setup

1. go to site settings on tinydot.com
2. find the Access Control section
3. change Access Mode to "Login Required"
4. add allowed emails or domains

adding rules

type an email or domain in the input field and click Add:

• alice@example.com - allows a specific person
• @example.com - allows anyone with an @example.com Google account (company wildcard)

you can add as many rules as you need. both email and domain rules can be mixed.

how visitors see it

when someone visits a protected site:

1. they see a "Sign in with Google" page
2. after signing in, their email is checked against your rules
3. if their email matches a rule, they get access for 30 days
4. if not, they see an "Access denied" page

domain rules

domain rules work as company wildcards. adding @acme.com allows anyone with a Google Workspace account on that domain. useful for company documentation, internal wikis, or team resources.

switching back to public

change Access Mode back to "Public" and the site is immediately accessible to everyone. your rules are preserved in case you want to re-enable access control later.

custom domains

access control works with both *.tinydot.com subdomains and custom domains. the sign-in flow goes through id.tinydot.com and redirects back to your site after authentication.

help

email hi@tinydot.com if you need help with access control.